# version: 7.19.6 (stable) # factory-software: 7.15.3 # total-memory: 4096.0MiB # cpu: ARM64 # cpu-count: 4 # total-hdd-space: 128.0MiB # architecture-name: arm64 # board-name: CCR2004-16G-2S+ # platform: MikroTik # installed-version: 7.19.6 # Flags: U - UNDOABLE # Columns: ACTION, BY, POLICY, TIME # ACTION BY POLICY TIME # U log action changed UAEMEX write 2026-07-15 13:29:26 # U RADIUS client added UAEMEX write 2026-07-15 13:25:01 # U dns changed UAEMEX write 2026-07-15 13:24:11 # U ip service changed UAEMEX write 2026-07-15 13:23:43 # U log rule added UAEMEX write 2026-07-15 13:23:14 # U log rule added UAEMEX write 2026-07-15 13:22:51 # U log rule added UAEMEX write 2026-07-15 13:22:40 # U log rule added UAEMEX write 2026-07-15 13:22:23 # U log action added UAEMEX write 2026-07-15 13:21:37 # U user AAA settings changed UAEMEX write 2026-07-15 13:20:23 # policy # U route 0.0.0.0/0 changed UAEMEX write 2026-06-24 12:37:10 # U A COGENT changed UAEMEX write 2026-06-24 11:05:37 # U A COGENT changed UAEMEX write 2026-06-24 11:05:36 # U A COGENT changed UAEMEX write 2026-06-24 10:58:51 # U ntp settings changed UAEMEX write 2026-06-24 07:51:18 # U ntp server record removed read 2026-06-24 07:51:18 # U ntp server record removed read 2026-06-24 07:51:18 # U ntp server record added read 2026-06-24 07:51:18 # U ntp server record added read 2026-06-24 07:51:18 # U route 0.0.0.0/0 changed UAEMEX write 2026-06-24 07:39:53 # U route 0.0.0.0/0 changed UAEMEX write 2026-06-24 07:39:48 # U route 0.0.0.0/0 changed UAEMEX write 2026-06-24 07:39:48 # U A COGENT changed UAEMEX write 2026-06-24 07:17:54 # U filter-rule-2 changed UAEMEX write 2026-06-24 07:17:05 # U filter-rule-2 changed UAEMEX write 2026-06-24 07:15:59 # U A CIRION changed UAEMEX write 2026-06-24 07:13:48 # U filter-rule-2 added UAEMEX write 2026-06-24 07:12:57 # U ip service changed UAEMEX write 2026-06-24 07:09:46 # U route 0.0.0.0/0 changed UAEMEX write 2026-06-22 07:27:44 # U A COGENT changed UAEMEX write 2026-06-22 07:27:33 # U A CIRION changed UAEMEX write 2026-06-19 12:43:37 # U A COGENT changed UAEMEX write 2026-06-19 12:43:30 # U A CIRION changed UAEMEX write 2026-06-19 12:43:23 # U filter-rule-1 added UAEMEX write 2026-06-19 12:43:11 # U A CIRION changed UAEMEX write 2026-06-19 09:33:08 # U A CIRION changed UAEMEX write 2026-06-19 09:12:16 # U A CIRION changed UAEMEX write 2026-06-19 09:12:11 # U A CIRION changed UAEMEX write 2026-06-19 09:10:05 # U A CIRION changed UAEMEX write 2026-06-19 09:08:40 # U A CIRION changed UAEMEX write 2026-06-19 09:04:45 # U A CIRION added UAEMEX write 2026-06-19 09:02:27 # U address changed UAEMEX write 2026-06-19 08:47:44 # U address changed UAEMEX write 2026-06-19 08:47:39 # U address changed UAEMEX write 2026-06-19 08:47:29 # U address changed UAEMEX write 2026-06-19 08:47:27 # U address added UAEMEX write 2026-06-19 08:46:16 # U device added UAEMEX write 2026-06-19 08:45:55 # U changed snmp settings UAEMEX write 2026-06-08 13:27:20 # U item changed UAEMEX write 2026-06-08 13:27:16 # # software id = 18NR-Y1YT # # model = CCR2004-16G-2S+ # serial number = HKC0ARSCDC8 /interface ethernet set [ find default-name=sfp-sfpplus1 ] name="sfp-sfpplus1 - WAN SOMNET" set [ find default-name=sfp-sfpplus2 ] name="sfp-sfpplus2 - FORTINET" /interface vlan add interface="sfp-sfpplus1 - WAN SOMNET" name=vlan1200 vlan-id=1200 /port set 0 name=serial0 /snmp community set [ find default=yes ] authentication-password=LICITACION2026 authentication-protocol=SHA1 encryption-password=LICITACION2026 encryption-protocol=AES name=SNMP-SOMNET security=private add addresses=::/0 name=SNMP-UAEMEX /system logging action add name=GrafanaLoki remote=172.20.0.254 remote-log-format=syslog remote-port=1514 src-address=172.20.4.107 target=remote /ipv6 settings set disable-ipv6=yes /ip address add address=172.20.4.107/16 comment="IP ADMINISTRACI\D3N" interface="sfp-sfpplus1 - WAN SOMNET" network=172.20.0.0 add address=38.104.249.76/29 comment="IP BGP" interface="sfp-sfpplus1 - WAN SOMNET" network=38.104.249.72 add address=148.215.212.1/30 comment="LAN UAEM\E9x" interface="sfp-sfpplus2 - FORTINET" network=148.215.212.0 add address=201.234.96.57/27 comment="IP Peer Cirion" interface=vlan1200 network=201.234.96.32 /ip dns set servers=1.1.1.3,1.0.0.3,66.28.0.45 /ip firewall address-list add address=148.215.231.0/24 list=lan-uaemex add address=148.215.215.0/24 list=lan-uaemex add address=148.215.212.0/24 list=lan-uaemex add address=148.215.60.0/24 list=lan-uaemex add address=148.215.54.0/24 list=lan-uaemex add address=148.215.51.0/24 list=lan-uaemex add address=148.215.50.0/24 list=lan-uaemex add address=148.215.49.0/24 disabled=yes list=lan-uaemex add address=148.215.48.0/24 list=lan-uaemex add address=148.215.47.0/24 list=lan-uaemex add address=148.215.46.0/24 list=lan-uaemex add address=148.215.44.0/24 list=lan-uaemex add address=148.215.43.0/24 list=lan-uaemex add address=148.215.42.0/24 list=lan-uaemex add address=148.215.41.0/24 list=lan-uaemex add address=148.215.40.0/24 list=lan-uaemex add address=148.215.39.0/24 list=lan-uaemex add address=148.215.38.0/24 list=lan-uaemex add address=148.215.37.0/24 list=lan-uaemex add address=148.215.36.0/24 list=lan-uaemex add address=148.215.35.0/24 list=lan-uaemex add address=148.215.34.0/24 list=lan-uaemex add address=148.215.33.0/24 list=lan-uaemex add address=148.215.32.0/24 list=lan-uaemex /ip firewall filter add action=fasttrack-connection chain=forward comment=FastTrack connection-state=established,related hw-offload=yes add action=accept chain=forward comment="Aceptar FastTrack" connection-state=established,related /ip firewall service-port set ftp disabled=yes set tftp disabled=yes set h323 disabled=yes set sip disabled=yes set pptp disabled=yes /ip route add check-gateway=ping disabled=yes distance=30 dst-address=0.0.0.0/0 gateway=38.104.249.73 routing-table=main scope=30 suppress-hw-offload=no target-scope=10 add disabled=no dst-address=148.215.231.0/24 gateway=148.215.212.2 routing-table=main suppress-hw-offload=no add disabled=no dst-address=148.215.215.0/24 gateway=148.215.212.2 routing-table=main suppress-hw-offload=no add disabled=no dst-address=148.215.212.0/24 gateway=148.215.212.2 routing-table=main suppress-hw-offload=no add dst-address=148.215.60.0/24 gateway=148.215.212.2 add dst-address=148.215.54.0/24 gateway=148.215.212.2 add dst-address=148.215.51.0/24 gateway=148.215.212.2 add dst-address=148.215.50.0/24 gateway=148.215.212.2 add disabled=yes dst-address=148.215.49.0/24 gateway=148.215.212.2 add dst-address=148.215.48.0/24 gateway=148.215.212.2 add dst-address=148.215.47.0/24 gateway=148.215.212.2 add dst-address=148.215.46.0/24 gateway=148.215.212.2 add dst-address=148.215.44.0/24 gateway=148.215.212.2 add dst-address=148.215.43.0/24 gateway=148.215.212.2 add dst-address=148.215.42.0/24 gateway=148.215.212.2 add dst-address=148.215.41.0/24 gateway=148.215.212.2 add dst-address=148.215.40.0/24 gateway=148.215.212.2 add dst-address=148.215.39.0/24 gateway=148.215.212.2 add dst-address=148.215.38.0/24 gateway=148.215.212.2 add dst-address=148.215.37.0/24 gateway=148.215.212.2 add dst-address=148.215.36.0/24 gateway=148.215.212.2 add dst-address=148.215.35.0/24 gateway=148.215.212.2 add dst-address=148.215.34.0/24 gateway=148.215.212.2 add dst-address=148.215.33.0/24 gateway=148.215.212.2 add dst-address=148.215.32.0/24 gateway=148.215.212.2 /ip service set ftp disabled=yes set telnet disabled=yes set www port=8080 set api disabled=yes set api-ssl disabled=yes set ssh port=46825 /radius add address=172.20.6.1 secret=Fr3eR4d!u5 service=login src-address=172.20.4.107 /routing bgp connection add afi=ip as=28526 comment="SESI\D3N A COGENT" connect=yes disabled=no listen=yes local.address=38.104.249.76 .role=ebgp name="A COGENT" output.default-originate=never .filter-chain=bgp-out-filter .network=lan-uaemex .redistribute=connected,static remote.address=38.104.249.73/32 .as=174 routing-table=main tcp-md5-key=UAEMEX2026 add afi=ip as=28526 comment="SESI\D3N A CIRION" connect=yes disabled=no input.filter=bgp-in-cirion listen=yes local.address=201.234.96.57 .role=ebgp name="A CIRION" output.default-originate=never .filter-chain=bgp-out-filter .network=lan-uaemex .redistribute=connected,static remote.address=201.234.96.33/32 .as=3356 routing-table=main tcp-md5-key=UAEMEX2026 /routing filter rule add chain=bgp-out-filter disabled=no rule="if (dst in 148.215.0.0/16) { accept } else { reject }" add chain=bgp-in-cirion disabled=no rule="set bgp-local-pref 200; accept" /snmp set enabled=yes trap-version=3 /system clock set time-zone-name=America/Mexico_City /system identity set name=RT-COLON-DEDICADO /system logging add action=GrafanaLoki prefix=172.20.4.107 topics=critical add action=GrafanaLoki prefix=172.20.4.107 topics=error add action=GrafanaLoki prefix=172.20.4.107 topics=info add action=GrafanaLoki prefix=172.20.4.107 topics=warning /system ntp client set enabled=yes /system ntp client servers add address=0.mx.pool.ntp.org add address=1.mx.pool.ntp.org /system routerboard settings set enter-setup-on=delete-key /tool graphing interface add /tool graphing resource add /user aaa set default-group=full use-radius=yes